https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T23:12:38.392999+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-052 certa-2013-avi-052 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. La majorité concernent des fuite… 2026-10-27T23:12:38.486755+00:00 certa-2013-avi-052 https://cve.radiocsirt.org/vuln/euvd-2026-182767 EUVD-2026-182767 2026-10-27T23:12:38.486802+00:00 EUVD-2026-182767 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6099 fkie_cve-2012-6099 2026-10-27T23:12:38.486818+00:00

The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.

 https://cve.radiocsirt.org/vuln/ghsa-cr78-rphw-w73p GHSA-cr78-rphw-w73p — Moodle Arbitrary File Read via Backup Functionality 2026-10-27T23:12:38.486848+00:00

Affected: Packagist: moodle/moodle

The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.

 https://cve.radiocsirt.org/vuln/gsd-2012-6099 gsd-2012-6099 2026-10-27T23:12:38.486874+00:00 gsd-2012-6099 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-6099 Withdrawn: UBUNTU-CVE-2012-6099 2026-10-27T23:12:38.486887+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: moodle

The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.